What’s Vulnerable › Products

trailofbits fickling vulnerabilities

9 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 9 published in the last 12 months.

Check whether your trailofbits fickling version is affected

Latest trailofbits fickling vulnerabilities

• CVE-2026-14535 — Fickling MLAllowlist analysis pass rendered inoperative by shared mutable state in AnalysisContext.shorten_code() (CVSS 9.8)
• CVE-2026-14534 — Fickling check_safety() bypass via unlisted standard library modules (_posixsubprocess, site, atexit) (CVSS 8.8)
• CVE-2026-22612 — Fickling vulnerable to detection bypass due to "builtins" blindness (CVSS 7.8)
• CVE-2026-22609 — Fickling has Static Analysis Bypass via Incomplete Dangerous Module Blocklist (CVSS 7.8)
• CVE-2026-22608 — Fickling vulnerable to use of ctypes and pydoc gadget chain to bypass detection (CVSS 7.8)
• CVE-2026-22607 — Fickling Blocklist Bypass: cProfile.run() (CVSS 7.8)
• CVE-2026-22606 — Fickling has a bypass via runpy.run_path() and runpy.run_module() (CVSS 7.8)
• CVE-2025-67748 — Fickling has Code Injection vulnerability via pty.spawn() (CVSS 7.8)
• CVE-2025-67747 — Fickling has missing detection for marshal.loads and types.FunctionType in unsafe modules list (CVSS 7.8)